small cookbook fixes

A few fixes. 

The apt cookbook HEAD calls some directives that are only available in Chef 11, which the base box doesn't have. So that cookbook needs to be locked.

Also, the specified version of chef-rvm made running 'vagrant provision' twice fail - this was because the path to chef-solo inside the vm was incorrect.